<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 05 Oct 2026 15:28:04 +0000</lastBuildDate>
    <item>
      <title>3f4138cc-056c-49c6-9de1-38be97514649</title>
      <link>https://vulnerability.circl.lu/sighting/3f4138cc-056c-49c6-9de1-38be97514649/export</link>
      <description>{"uuid": "3f4138cc-056c-49c6-9de1-38be97514649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81699", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muokqagmfe23", "content": "\ud83d\udccc CVE-2026-81699 - openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounde... https://www.cyberhub.blog/cves/CVE-2026-81699", "creation_timestamp": "2026-09-04T08:37:06.971577Z"}</description>
      <content:encoded>{"uuid": "3f4138cc-056c-49c6-9de1-38be97514649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81699", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muokqagmfe23", "content": "\ud83d\udccc CVE-2026-81699 - openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounde... https://www.cyberhub.blog/cves/CVE-2026-81699", "creation_timestamp": "2026-09-04T08:37:06.971577Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3f4138cc-056c-49c6-9de1-38be97514649/export</guid>
      <pubDate>Fri, 04 Sep 2026 08:37:06 +0000</pubDate>
    </item>
    <item>
      <title>ab77855b-2ce5-485c-99ab-732e0b100979</title>
      <link>https://vulnerability.circl.lu/sighting/ab77855b-2ce5-485c-99ab-732e0b100979/export</link>
      <description>{"uuid": "ab77855b-2ce5-485c-99ab-732e0b100979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81694", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3munzxronfk2x", "content": "\ud83d\udccc CVE-2026-81694 - openssl-encrypt (pip package, versions &amp;lt;= 1.4.8) fails to sanitize filenames read from untrusted drive data (outside the AES-GCM authenticated manifes... https://www.cyberhub.blog/cves/CVE-2026-81694", "creation_timestamp": "2026-09-04T03:37:06.543918Z"}</description>
      <content:encoded>{"uuid": "ab77855b-2ce5-485c-99ab-732e0b100979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81694", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3munzxronfk2x", "content": "\ud83d\udccc CVE-2026-81694 - openssl-encrypt (pip package, versions &amp;lt;= 1.4.8) fails to sanitize filenames read from untrusted drive data (outside the AES-GCM authenticated manifes... https://www.cyberhub.blog/cves/CVE-2026-81694", "creation_timestamp": "2026-09-04T03:37:06.543918Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ab77855b-2ce5-485c-99ab-732e0b100979/export</guid>
      <pubDate>Fri, 04 Sep 2026 03:37:06 +0000</pubDate>
    </item>
    <item>
      <title>c7ddd717-88e3-4626-b449-2ade0de3674b</title>
      <link>https://vulnerability.circl.lu/sighting/c7ddd717-88e3-4626-b449-2ade0de3674b/export</link>
      <description>{"uuid": "c7ddd717-88e3-4626-b449-2ade0de3674b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81691", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumq2ohfyg2f", "content": "\ud83d\udccc CVE-2026-81691 - openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and ... https://www.cyberhub.blog/cves/CVE-2026-81691", "creation_timestamp": "2026-09-03T15:07:09.718470Z"}</description>
      <content:encoded>{"uuid": "c7ddd717-88e3-4626-b449-2ade0de3674b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81691", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumq2ohfyg2f", "content": "\ud83d\udccc CVE-2026-81691 - openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and ... https://www.cyberhub.blog/cves/CVE-2026-81691", "creation_timestamp": "2026-09-03T15:07:09.718470Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c7ddd717-88e3-4626-b449-2ade0de3674b/export</guid>
      <pubDate>Thu, 03 Sep 2026 15:07:09 +0000</pubDate>
    </item>
    <item>
      <title>c0be98e8-574a-4037-b4be-e234fb05a55e</title>
      <link>https://vulnerability.circl.lu/sighting/c0be98e8-574a-4037-b4be-e234fb05a55e/export</link>
      <description>{"uuid": "c0be98e8-574a-4037-b4be-e234fb05a55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81690", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumoezosav2x", "content": "\ud83d\udccc CVE-2026-81690 - openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the d... https://www.cyberhub.blog/cves/CVE-2026-81690", "creation_timestamp": "2026-09-03T14:37:06.692698Z"}</description>
      <content:encoded>{"uuid": "c0be98e8-574a-4037-b4be-e234fb05a55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81690", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumoezosav2x", "content": "\ud83d\udccc CVE-2026-81690 - openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the d... https://www.cyberhub.blog/cves/CVE-2026-81690", "creation_timestamp": "2026-09-03T14:37:06.692698Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c0be98e8-574a-4037-b4be-e234fb05a55e/export</guid>
      <pubDate>Thu, 03 Sep 2026 14:37:06 +0000</pubDate>
    </item>
    <item>
      <title>0390ac15-44b5-4235-829e-abd5a77234aa</title>
      <link>https://vulnerability.circl.lu/sighting/0390ac15-44b5-4235-829e-abd5a77234aa/export</link>
      <description>{"uuid": "0390ac15-44b5-4235-829e-abd5a77234aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81693", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumkzrd47l2l", "content": "\ud83d\udccc CVE-2026-81693 - openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR imag... https://www.cyberhub.blog/cves/CVE-2026-81693", "creation_timestamp": "2026-09-03T13:37:07.810446Z"}</description>
      <content:encoded>{"uuid": "0390ac15-44b5-4235-829e-abd5a77234aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81693", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumkzrd47l2l", "content": "\ud83d\udccc CVE-2026-81693 - openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR imag... https://www.cyberhub.blog/cves/CVE-2026-81693", "creation_timestamp": "2026-09-03T13:37:07.810446Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0390ac15-44b5-4235-829e-abd5a77234aa/export</guid>
      <pubDate>Thu, 03 Sep 2026 13:37:07 +0000</pubDate>
    </item>
    <item>
      <title>f2b67389-4edc-4545-9da3-8772007e2a1c</title>
      <link>https://vulnerability.circl.lu/sighting/f2b67389-4edc-4545-9da3-8772007e2a1c/export</link>
      <description>{"uuid": "f2b67389-4edc-4545-9da3-8772007e2a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81696", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujerhlcvo2b", "content": "\ud83d\udccc CVE-2026-81696 - openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft m... https://www.cyberhub.blog/cves/CVE-2026-81696", "creation_timestamp": "2026-09-02T07:07:07.151742Z"}</description>
      <content:encoded>{"uuid": "f2b67389-4edc-4545-9da3-8772007e2a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81696", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujerhlcvo2b", "content": "\ud83d\udccc CVE-2026-81696 - openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft m... https://www.cyberhub.blog/cves/CVE-2026-81696", "creation_timestamp": "2026-09-02T07:07:07.151742Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f2b67389-4edc-4545-9da3-8772007e2a1c/export</guid>
      <pubDate>Wed, 02 Sep 2026 07:07:07 +0000</pubDate>
    </item>
    <item>
      <title>c9b922ff-1e5b-42bf-bba6-23973ac394f8</title>
      <link>https://vulnerability.circl.lu/sighting/c9b922ff-1e5b-42bf-bba6-23973ac394f8/export</link>
      <description>{"uuid": "c9b922ff-1e5b-42bf-bba6-23973ac394f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81695", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujd3tbnpo2v", "content": "\ud83d\udccc CVE-2026-81695 - openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can ... https://www.cyberhub.blog/cves/CVE-2026-81695", "creation_timestamp": "2026-09-02T06:37:07.448657Z"}</description>
      <content:encoded>{"uuid": "c9b922ff-1e5b-42bf-bba6-23973ac394f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81695", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujd3tbnpo2v", "content": "\ud83d\udccc CVE-2026-81695 - openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can ... https://www.cyberhub.blog/cves/CVE-2026-81695", "creation_timestamp": "2026-09-02T06:37:07.448657Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c9b922ff-1e5b-42bf-bba6-23973ac394f8/export</guid>
      <pubDate>Wed, 02 Sep 2026 06:37:07 +0000</pubDate>
    </item>
    <item>
      <title>11721c99-77c9-4479-bbaf-5021b09d183f</title>
      <link>https://vulnerability.circl.lu/sighting/11721c99-77c9-4479-bbaf-5021b09d183f/export</link>
      <description>{"uuid": "11721c99-77c9-4479-bbaf-5021b09d183f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj62usqkq2f", "content": "\ud83d\udccc CVE-2026-81698 - openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untruste... https://www.cyberhub.blog/cves/CVE-2026-81698", "creation_timestamp": "2026-09-02T05:07:07.230311Z"}</description>
      <content:encoded>{"uuid": "11721c99-77c9-4479-bbaf-5021b09d183f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj62usqkq2f", "content": "\ud83d\udccc CVE-2026-81698 - openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untruste... https://www.cyberhub.blog/cves/CVE-2026-81698", "creation_timestamp": "2026-09-02T05:07:07.230311Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/11721c99-77c9-4479-bbaf-5021b09d183f/export</guid>
      <pubDate>Wed, 02 Sep 2026 05:07:07 +0000</pubDate>
    </item>
    <item>
      <title>eb24e617-cc70-49a2-abd9-e5c75c13e190</title>
      <link>https://vulnerability.circl.lu/sighting/eb24e617-cc70-49a2-abd9-e5c75c13e190/export</link>
      <description>{"uuid": "eb24e617-cc70-49a2-abd9-e5c75c13e190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81699", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mufp45rg2u2r", "content": "OpenSSL: CVE-2026-81699 [HIGH]\n\nopenssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing.\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81699", "creation_timestamp": "2026-08-31T20:01:25.038302Z"}</description>
      <content:encoded>{"uuid": "eb24e617-cc70-49a2-abd9-e5c75c13e190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81699", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mufp45rg2u2r", "content": "OpenSSL: CVE-2026-81699 [HIGH]\n\nopenssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing.\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81699", "creation_timestamp": "2026-08-31T20:01:25.038302Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eb24e617-cc70-49a2-abd9-e5c75c13e190/export</guid>
      <pubDate>Mon, 31 Aug 2026 20:01:25 +0000</pubDate>
    </item>
    <item>
      <title>04c5e728-6d81-4750-a1e2-7e6a616d948b</title>
      <link>https://vulnerability.circl.lu/sighting/04c5e728-6d81-4750-a1e2-7e6a616d948b/export</link>
      <description>{"uuid": "04c5e728-6d81-4750-a1e2-7e6a616d948b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mufbr2innp2q", "content": "New HIGH CVE for OpenSSL: CVE-2026-81698\n\nopenssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can c\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-81698", "creation_timestamp": "2026-08-31T16:02:33.285591Z"}</description>
      <content:encoded>{"uuid": "04c5e728-6d81-4750-a1e2-7e6a616d948b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mufbr2innp2q", "content": "New HIGH CVE for OpenSSL: CVE-2026-81698\n\nopenssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can c\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-81698", "creation_timestamp": "2026-08-31T16:02:33.285591Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/04c5e728-6d81-4750-a1e2-7e6a616d948b/export</guid>
      <pubDate>Mon, 31 Aug 2026 16:02:33 +0000</pubDate>
    </item>
  </channel>
</rss>
